orcus | b1bdbd644ce5e7847dce4f459039bcf254d443424ee7e7d4beab7fccd71af377

General

Target

b1bdbd644ce5e7847dce4f459039bcf254d443424ee7e7d4beab7fccd71af377
Size

1.2MB
MD5

64ab45128a8e4e5be46efcadad954cc9
SHA1

5b2bf4867520bf9a0e9dc67ed4f3abab0efd23d1
SHA256

b1bdbd644ce5e7847dce4f459039bcf254d443424ee7e7d4beab7fccd71af377
SHA512

22daf8f4e577a896a8f7e6a1b20e6a762d474747eaaea8ec2c3c91cdcb848141f472171bb322ecaf9762d1fdf70aac7ee41ccd8b07533a1f15603f5f6540f92a
SSDEEP

24576:k5WHS04YNEMuExDiU6E5R9s8xY/2l/dRJ5dtsPxNGfyiIbt+rl:k5Wd4auS+UjfU2T/5XDtIbt+r

Score

10^/10

rat orcus

Family

orcus

C2

192.168.0.105

Mutex

35d48f7b63f846579b6984fdf079d88c

Attributes

administration_rights_required
false
anti_debugger
false
anti_tcp_analyzer
false
antivm
false
autostart_method
2
change_creation_date
false
force_installer_administrator_privileges
false
hide_file
false
install
false
installation_folder
%appdata%\Microsoft\Speech\AudioDriver.exe
installservice
false
keylogger_enabled
false
newcreationdate
11/22/2024 10:50:42
plugins
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
reconnect_delay
10000
registry_autostart_keyname
Audio HD Driver
registry_hidden_autostart
false
set_admin_flag
false
tasksch_name
Audio HD Driver
tasksch_request_highest_privileges
false
try_other_autostart_onfail
false

aes.plain

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1bdbd644ce5e7847dce4f459039bcf254d443424ee7e7d4beab7fccd71af377